Monday, May 17, 2010

Google encrypts Google Search

Following the unintended collection of payload data from open WiFi networks performed by the cars mapping streets for Google Street View, Google claims that there is no reason to worry because they have collected only fragments of payload data.


"Our cars are on the move; someone would need to be using the network as a car passed by; and our in-car WiFi equipment automatically changes channels roughly five times a second. In addition, we did not collect information traveling over secure, password-protected WiFi networks."

They blame the situation on a piece of code that is included in the software used - code that was included by mistake. Google stopped the Street View cars as soon as they discovered the fact, has proceeded to isolate the data in question and is taking steps to delete it suitably. It even decided to stop the cars from collecting any kind of WiFi network data for good.

Google has also decided to view this occurrence as a wake-up call and announced that, starting this week, they will start providing an encrypted version of Google Search. It is still not clear if it will be the default or just an option.

Earlier this year, in the wake of the infamous Aurora attack, Google decided to make HTTPS access for Gmail a default, and the Gmail Engineering Director commented at the time that "using https helps protect data from being snooped by third parties, such as in public wifi hotspots. We initially left the choice of using it up to you because there's a downside: HTTPS can make your mail slower since encrypted data doesn't travel across the web as quickly as unencrypted data. Over the last few months, we've been researching the security/latency tradeoff and decided that turning https on for everyone was the right thing to do."

Obviously, the time has come when security is starting to be more important than cost or a small increase in waiting time.

Source & Credit : http://www.net-security.org/

Sunday, May 16, 2010

How to stay safe on Facebook

PRIVACY and security must be dirty words at the Facebook HQ at the moment as the world's largest social media network comes under fire for its privacy policy that has left users exposed and vulnerable.

Amazingly, it was reported that Facebook's privacy policy is a whopping 5,830 words long, even more verbose than the Constitution of the United States which reads at 4,543 words.

Here are some of the precautions you need to take to stay private and safe:

Make friend lists

Categorise your “friends” into various groups according to what information you want them to have access to, from “Work Friends” (minimal access) to “Acquaintances”, “Family” and “Close Friends” (full access) .

Restrict access to profile

To prevent strangers from accessing your page, it is advisable to allow “Only Friends” to access your profile.

Remove your address and phone number

This may be useful information for your real friends and family but imagine what will happen if the information falls into the wrong hands.

Remove your full birthdate from your profile

Identity thieves can use it to obtain more information on you and even gain access to your bank or credit card account. If you want to remind your friends about your birthday, remove the year.

Be careful when registering for new applications

It is all fun and exciting to try out new games and quizzes but what many don't realise is that you may unknowingly be sharing all your information with the developers who can then sell your data or spam you.

Go to “Privacy Settings” and tick “Applications”, followed by “Settings”. Uncheck the boxes for the personal information that you do not want them to obtain.

Still, according to security expert website, the CSO (Chief Security Officer) Online, Facebook users unwittingly expose themselves to five dangers that might be beyond their control: their information is shared with third parties; their privacy settings revert to a less safe default mode after each redesign; malware from Facebook advertisements; fake profiles from scammers; and real friends who unknowingly make them vulnerable.


Source & Credit to : http://thestar.com.my

New security features and roadblocks to be added

Sunday May 16, 2010

Facebook is launching new security features to combat cyber attacks, scams and spam, according to foreign news agency Associated Press.

The new security features come as the giant social network site faces growing criticism over the way it handled users' privacy - in which users are pushed to share more about themselves with one another and the outside world.

Facebook is said to be a magnet for Internet criminals looking to steal users' passwords and other personal information.

Under the new security measures, users will reportedly be able to request for notification by e-mail or text message when their account is accessed from a computer or mobile device they have not used before.

However, for those who travel a lot, Facebook assures that their log-in attempt can be done without any hassle.

Facebook says that it also plans to add roadblocks for any “unusual” activity detected, such as simultaneous log-ins from opposite sides of the world.

A proposed notification method, it was reported, is that users will be shown a photo with their friends tagged and be asked to correctly identify who they are before the second log-in goes through.

Users will also be able to check where the latest log-ins have come from. This is similar to a feature Google offers on its Gmail service, where users can view the date, time and location of the most recent log-ins to their account.

However, some of these changes are still being tested, so the new features will be rolled out gradually over the next few weeks, says Facebook.


Source & Credit to : http://thestar.com.my

The big bad web

Sunday May 16, 2010

By HARIATI AZIZAN
sunday@thestar.com.my

The Internet poses various safety issues and Facebook's latest privacy gaffes make it even worse.

A JEALOUS husband murders his wife after becoming enraged that she had changed her Facebook status to single.

It may sound like a Hallmark movie-plot but last year alone saw a few similar incidents around the world. And this does not include the harassment, threats or legal suits that Facebook members faced over their postings.

Risks without borders: The privacy policy of giant social media network Facebook has come under fire as it exposes users to malicious attacks and cyber crimes. - Picture posed by model

After Edward Richardson, 41, stabbed his estranged wife Sarah Richardson, 26, to death - the third of such homicide cases in the United Kingdom over 12 months - British authorities were quick to highlight the importance of social media literacy.

Crimes of passion are nothing new but social networking may just have changed the variables. And while Facebook is in no way to be blamed for the violence - she could have used MySpace, Meebo or any other social network - this case is an undeniable example of how increased connectivity, the speed with which information is transmitted, and privacy controls are changing our world.

The main question thrown up in discussion groups was whether Richardson fully understood how Facebook worked.

Was she aware that by changing her status, her estranged husband would instantly receive a post on his Facebook newsfeed? Did she know how to exclude him from such updates if she had wished to?

Malaysia has not recorded any similar cases yet, but with reportedly 2,619,040 Malaysians registered on Facebook, there may be cause for concern.

"Many who go to social media networks do not realise the consequences of how they act and what they say on the Internet will have on themselves, their families and friends"- ASSO C PR OF DR KHAIDZIR ISMAIL

As psychologist Assoc Prof Dr Khaidzir Ismail from Universiti Kebangsaan Malaysia highlights, many of the Malaysians who go to social media networks do not realise the consequences of how they act and what they say on the Internet will have on themselves, their families and friends.

“The Internet is a good outlet for people to express themselves and socialise. However, many, especially the young, do not have the skills or etiquette to know how to behave on the social media networks. One problem is that many are IT illiterate,” he says.

Worse, the latest Facebook privacy scandals may make the existing security worries so 2009 for many users.

New privacy issues

While many were still grappling with how to find their way around the social media network and manage their personal information on it, Facebook introduced new privacy settings at the end of last year.

Too personal: Over the past six years, social networking has been Facebook's stand-out phenomenon, linking up more than one billion people eager to exchange videos, pictures or last-minute birthday wishes. - Reuters

The changes made more private data public by default as users are given the responsibility to opt out if they want to keep their information private, or share it only with a trusted group of friends.

They caused a lot of confusion and many users were unaware that their personal information was available to everyone.

Another Facebook glitch recently further highlighted the vulnerability of its users - estimated to be more than 400 million people worldwide - as the malfunction made it possible for people not friended by Facebook users to access their personal information, including chat conversations, friend lists and more.

Unsurprisingly, censure mounted from the authorities worldwide - US senators reiterated their public calls for Facebook to rethink its privacy safeguards; the American Civil Liberties Union launched a petition against its founder Mark Zuckerberg and European data protection officials slammed the privacy changes.

It also caused a backlash among the tech-savvier user community and technology industry.

A number of high-profile users reportedly deleted their Facebook accounts while other irate users have launched an online campaign to make June 6 a “No Facebook Day”.

This has led to a crisis meeting at the Facebook headquarters last Friday, as it took steps to address the problems. Subsequently, tighter security measures were announced to protect its users' personal information.

However, as Facebook stressed in the press, in its bid to calm the furore over its privacy policy, the first line of defence is the user.

Chief executive officer of CyberSecurity Malaysia - the national cyber security specialist centre under the purview of the Science, Technology and Innovation Ministry (MOSTI) - Lt Col Husin bin Haji Jazri (Retired) concurs that users have to practise safe behaviour on Facebook and anywhere else online, he says in an e-mail interview.

Security upgrade

According to the Malaysian Computer Emergency Response Team (MyCERT), there were more than 150 complaints of cyber security breaches last year.

While this included cases of identity theft, hacking and cyberstalking, there were also reports of personal data abuse by estranged dating or married couples who have access to their partners' personal information.

As MyCERT chief Adli Abdul Wahid revealed to a local Malay language daily at the last Computer Security Day celebrations, they have received complaints from Internet users who have found their contact details - with offers of sex service - posted on public toilet walls and Internet forums as well as circulated via e-mail to strangers.

A quick e-mail survey by Sunday Star, however, shows that most Malaysians know how to protect themselves on the Internet, especially on social media networks like Facebook.

An IT executive who only wants to be known as Davina K. is among those who feel that the world's biggest social network needs to review its privacy policy.

“Most of us got onto Facebook to keep in touch with friends and family overseas or reconnect with old schoolmates. But now instead of connecting with them, half the time we have to monitor our privacy setting to make sure that our personal information is safe. It is taking the fun out of socialising,” she says.

Many, like engineer J. Tan, say that they have always been very careful about what they put on their profile page in Facebook.

“I like Facebook because it keeps me in the loop with what my friends and family are doing without me having to speak to them at all. But I am careful about sharing personal details with strangers. There is always the danger of your details ending up on public toilet walls, right?” he says.

Media executive Adibah A. is another who keeps a tight rein on what personal information gets out.

“I don't simply disclose information that I don't want people to know of. To me, it is better to be careful than sorry later. People can always spam my inbox with marketing flyers and any other junk. To protect my privacy, I am very selective of the information shared among friends.”

When audio visual (AV) designer Ruza Jajuli realised how her work and family were spilling into Facebook, she quickly made a list of “close friends”.

“There are things I would not like to share with them (family or office mates) as I wouldn't in 'real' life, so I created a list for the people who I do not want to see my 'crazy' pictures or comments,” she shares.

The fear of having her personal secrets being abused by others, including those who she counts as friends and acquaintances, is why regular Internet user Melissa K. is swearing off Facebook.

“You can say I am a bit paranoid, but I am now careful after a not-so-nice separation from my ex many years ago. He saved everything I said in anger (on voicemail, e-mail and SMS) and gossiped using it.”

Lt Col Husin advises those who have been threatened or victimised to lodge a police report.

“Then the police will do the necessary investigation and determine whether or not a crime has been committed. After which, law enforcement authorities (like the police) will determine if further action can be taken on the said person,” he says.

More importantly, with Facebook being so open, it is vital that users take safety precautions should they start interacting offline with those they meet online.

Just last week, an inquest hearing in the UK revealed how one former army warrant officer Stewart Shaw stabbed his partner Julie Sudlow - whom he had met on Facebook - after their whirlwind romance went sour.

As reported in British daily The Telegraph, the testimony of the investigating officer showed that Sudlow soon discovered that the man she was seeing was not the same as the man she had met on Facebook.

He became violent with her and when she called the police on him, Shaw lost his temper and accused her of ruining his life before murdering her in rage.


Source & Credit to : http://thestar.com.my

Tuesday, May 11, 2010

Dialog Pengurusan Keselamatan Cybersecurity, Pejabat Ketua Keselamatan Kerajaan Malaysia

11 Mei, 2010 18:57 PM

KOTA KINABALU, 11 Mei (Bernama) -- Maklumat merupakan aset berharga masa kini dan kehilangan maklumat penting dan kritikal mampu melumpuhkan operasi sesebuah organisasi, demikian menurut CyberSecurity Malaysia.

Organisasi-organisasi kini menjadi sasaran kepada penjenayah siber dan sebarang serangan atau sabotaj yang dilakukan sama ada disedari atau tidak, mampu mengancam dan menggugat keselamatan negara.

Sehubungan itu, CyberSecurity Malaysia bersama-sama Pejabat Ketua Pegawai Keselamatan Kerajaan Malaysia hari ini menganjurkan Majlis Dialog Pengurusan Keselamatan Perlindungan Sasaran Penting dan Bengkel Kesedaran Pelaksanaan Pengurusan Sistem Keselamatan Maklumat (ISMS) Peringkat Zon Sabah dan Wilayah Persekutuan Labuan.

Ketua Pengarah Pejabat Ketua Pegawai Keselamatan Kerajaan Malaysia Datuk Haji Johari Haji Jamaluddin berkata objektif utama majlis dialog dan bengkel itu adalah untuk memberi kesedaran tentang pentingnya pelaksanaan pensijilan ISMS kepada organisasi yang dikenal pasti sebagai Prasarana Maklumat Kritikal Negara (CNII).

"Selain itu, majlis dialog dan bengkel ini diadakan supaya CNII terbabit dapat mengenal pasti skop pensijilan ISMS serta produk dan perkhidmatan kritikal mereka kepada masyarakat dan negara."

"Kementerian Sains, Teknologi dan Inovasi (MOSTI) telah melaksanakan kajian untuk mengadakan Dasar Keselamatan Siber Nasional pada 2005 yang bertujuan menilai dan menangani risiko yang akan dihadapi oleh CNII", kata Johari.

Menurutnya, dasar itu yang diterima untuk perlaksanaan pada 2006 mengariskan pelan tindakan yang perlu dilaksanakan bagi mengurangkan risiko ancaman siber terhadap CNII termasuklah mengenal pasti langkah keselamatan siber yang tepat, membangunkan program keselamatan siber yang menyeluruh dan kerangka kerja melindungi CNII.

Sementara itu, Ketua Pegawai Operasi CyberSecurity Malaysia, Zahri Yunos berkata dasar Keselamatan Siber Nasional telah dirangka sebagai pendekatan yang komprehensif dan bersepadu dalam memelihara e-kedaulatan negara dan menangani isu berkaitan keselamatan siber terutamanya ke atas Prasarana Kritikal Maklumat Negara.

"Dasar tersebut mentakrifkan CNII Malaysia sebagai aset, sistem dan fungsi yang penting kepada negara di mana sebarang gangguan atau kemusnahan akan membawa kesan buruk kepada ekonomi, imej keselamatan dan pertahahan negara, keupayaan kerajaan untuk berfungsi, dan keselamatan dan kesihatan awam.

"Salah satu fokus utama dalam dasar ini adalah pematuhan dan penggunaan standard keselamatan maklumat oleh agensi atau organisasi CNII", katanya.

-- BERNAMA

Source and credit : http://www.bernama.com/

The dangers of webcams

Submitted by mala on Tuesday, May 11th, 2010
Tuesday, May 11th, 2010 15:10:00

webcam

Webcams might be a necessary piece of equip­ment for video-conferencing and a useful add-on to free voice-over Internet services like Skype.

However, they present a number of challenges to parents who want to protect their children's privacy.

As parents are naturally concerned about their children communicating with strangers in any medium, when you add a camera into the mix-whether it's taking still photos or video-you edge quickly from the merely icky into the pos­sibly illegal.

Plainly put, you have to make sure your child isn't going to end up in communication with a child predator.

The best way to prevent that is by making sure that your Webcam is in a common area, and only to be used when there's a parent or other responsible adults nearby.

A second and subtler risk is that hackers may be able to install software on your Internet-connect­ed camera that allows them to access and control it remotely. Last, using a service like Skype may ex­pose you to contact requests from spammers.

With that in mind, The Malay Mail presents (courtesy of Trend Micro), some tips for safer We­bcam use:

1. Shut off the camera and cover it with a lens cap when you aren't using it.

2. Keep the camera in an open space, like a living room, rather than allowing your kids to use it in private.

3. Don't let your child use the camera to com­municate with anyone who isn't a peer or who they don't know personally.

4. Remind your child not to respond to IMs, emails, or contact requests from unknown people.

5. Keep away from the camera any private information. For example, don't po­sition it so that your house number is in the frame.

Source & Credit : http://www.mmail.com.my